Extracted

• • Target

    6d6cb8e26b3c4acff08359ce0092cb036065478911651eab2070f5c2f399270d

  • Size

    216KB

  • MD5

    069ae2be6b56231e3110a10ac560cd26

  • SHA1

    d410f0cb9ca8b3e041257ab13dba46f7c717401e

  • SHA256

    6d6cb8e26b3c4acff08359ce0092cb036065478911651eab2070f5c2f399270d

  • SHA512

    a0c765d662e2da4ebe8987e26735ac27b21c7b8a820c3727b71ef80cfc5ba472a285a78a2530ac75a1b95e3d5e11379059e0b4bbd42516f7d9ef6f5fa52f29b1

  • SSDEEP

    6144:5p5v9qAZcR/6TkINwlyfEBjL4bV4IoIHp0:/5XC1sfpVroCp

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2